Microsoft Exchange Attacks: How to mitigate and respond to zero-day vulnerabilities

On March 2, Microsoft® announced that four previously unknown or 'zero-day' vulnerabilities in its Exchange® Server software were being exploited by cyber threat actors.

Since early January, critical flaws in Exchange Servers 2013, 2016, 2019, and possibly 2010, have been abused by hackers to steal valuable data. In many cases, threat actors have deployed a web shell - a server-side script that provides a user interface for the attacker - through which they can control the compromised server remotely and use that access to steal data and plant ransomware.

Read the full article: Insurance Business.